Application Security Engineer II - Contract

Overview

Application Security Engineer II (ASE) for Bugcrowd, managing bug bounty vulnerability submissions and supporting triage, validation, and incident response.

What you'll do

• Curate and manage incoming security vulnerability submissions for Bugcrowd-managed bug bounty programs.
• Validate submissions for validity, accuracy, and severity.
• Communicate with Bugcrowd clients or researchers when additional information is needed.
• Perform ongoing triage and validation services for managed programs.
• Escalate and communicate about the highest severity bugs as part of incident response.

What you'll need

• Have a bachelor’s degree or previous security consulting experience.
• Demonstrate a passion for security assessment research.
• Have high proficiency with Burp Suite (or another interception proxy).
• Use industry-standard tools such as nmap, sqlmap, or tools included in Kali Linux.
• Have strong knowledge of OWASP Top Ten type vulnerabilities.
• Have strong skill in at least one scripting/development language for triage/validation tooling.

Details

• Work-from-home 100% of the time (remote).
• Location: Remote in Brazil.
• Employment type: Contract.